A SimplePractice payments alternative for prescribing practices may be a separately reviewed healthcare merchant account, but it does not necessarily require replacing the practice-management system. The applicable acquirer, processor, or underwriting provider determines whether the submitted model meets its current controls. Recurring plans must also follow applicable disclosure, consent, and cancellation requirements, subject to verification of current rule status and effective provisions.
SimplePractice payments alternative for prescribing practices at a glance
| Question | What to expect | Who sets it |
|---|---|---|
| Can SimplePractice remain in use? | Possibly; scheduling, records, and card acceptance can be separate layers. | Practice and vendors |
| Who reviews prescribing-related activity? | The applicable acquirer, processor, or underwriting provider reviews the submitted business model and materials. | Applicable provider |
| What may trigger review? | Telehealth, prescription-adjacent services, recurring billing, claims, or unclear website language. | Provider underwriting team |
| What does a dedicated account change? | It creates a payment relationship reviewed for the submitted healthcare model. | Applicable provider |
| Are fees or reserves fixed? | No universal federal amount or formula is established in this research. | Confirm with the provider |
| Can stored card credentials move? | Do not assume tokens are portable; fresh authorization may be required. | Current and new providers |
| What governs recurring plans? | Applicable disclosures, express informed consent, and cancellation requirements must be verified against current law and provider terms. | Applicable law and contract |
| Is a BAA automatic? | No; assess whether the vendor handles PHI and whether a BAA is required. | Practice and vendor |
Can I use SimplePractice for scheduling and a separate healthcare merchant account?
Yes, a practice can potentially keep its scheduling, records, intake, or communications workflow while moving card acceptance to a separate merchant account. A practice-management layer and a payment layer perform different functions, so replacing one does not automatically require replacing the other.
The applicable provider should review the actual service model, website, recurring-plan language, refund terms, and prescription-adjacent workflow before approval. A separate account is an operational option, not a federal requirement and not a guarantee against future holds, reserves, disputes, or termination.
MDLaunchr is the brand behind WhiteLabelClinic.com, a white-label telehealth infrastructure platform. It helps qualified businesses evaluate the technology, operational, compliance, clinical-network, and fulfillment relationships involved in a launch; it is not a processor or treating clinician.
Why might telehealth prescribing payments receive extra review?
General-purpose payment providers may apply underwriting, acceptable-use, fraud, or risk controls that make prescription-related or telehealth transactions subject to review, limitations, reserves, or account closure. The specific provider’s current contract controls.
That does not mean every aggregator prohibits prescribing, and federal sources do not establish a universal “high-risk” classification, fee, reserve formula, or card-network threshold for these practices. Ask the applicable provider for its current written criteria rather than relying on industry shorthand.
Your website and checkout are part of the review. Under Section 5 of the FTC Act and the FTC’s Health Products Compliance Guidance, health-related advertising must be truthful, not misleading, and supported by appropriate evidence. Testimonials cannot communicate claims the business could not lawfully make directly. The FTC’s 2024 Consumer Reviews and Testimonials Rule also addresses certain fake or manipulated reviews and testimonials.
For related underwriting preparation, review the telehealth website merchant underwriting criteria and the telehealth merchant account underwriting documents.
Does a separate merchant account solve HIPAA payment concerns?
No, a separate account does not by itself make a payment workflow HIPAA compliant. Under the HIPAA Privacy Rule, 45 C.F.R. Part 164, Subpart E, a covered entity may use or disclose PHI only as permitted by the rule. A payment vendor may be a business associate when it performs covered services involving PHI on the entity’s behalf.
Separate the data flows before selecting a provider:
- Card and transaction data needed to process a payment.
- PHI placed in receipts, invoices, descriptors, support tickets, or payment metadata.
- Whether the processor receives PHI or only limited transaction information.
- Whether a business associate agreement is required and available.
The HIPAA Security Rule, 45 C.F.R. §§ 164.302–164.318, calls for administrative, physical, and technical safeguards for electronic PHI. Keep clinical details in the practice-management or EHR system instead of payment fields. A vendor’s willingness to sign a BAA, by itself, does not prove that the proposed data flow is compliant.
A business should also assess whether the FTC Health Breach Notification Rule, 16 C.F.R. Part 318, could apply to a health app or similar technology outside HIPAA. HIPAA and FTC breach obligations can involve different entities and data flows.
How do I migrate recurring plans without a billing gap?
Use an ordered cutover that preserves customer consent, renewal visibility, refunds, disputes, and cancellation records. Do not silently move stored credentials or begin new recurring charges without confirming the new authorization and checkout process.
- 1Inventory current plans. Record each plan’s price, cadence, renewal date, cancellation term, refund rule, failed-payment workflow, and consent record.
- 2Obtain written approval first. Ask the new provider to review the precise services, telehealth structure, recurring model, prescription-adjacent activity, website, and marketing language.
- 3Design the new checkout. Clearly state the price, cadence, renewal, refund terms, service description, and cancellation method.
- 4Confirm credential migration. Ask the current and new providers whether card tokens can be transferred lawfully and technically. If not, obtain fresh payment authorization.
- 5Choose a cutover date. Schedule it before the next renewal cycle and keep the old arrangement available while renewals, refunds, and disputes are reconciled.
- 6Run a controlled test. Test one-time charges, recurring charges, failed payments, refunds, cancellations, receipts, webhooks, and reconciliation reports.
- 7Notify customers before renewal. Explain the change, amount and timing of charges, cancellation steps, and any required payment-detail update.
- 8Reconcile after launch. Compare active plans with successful charges and cancellations, then retain records under the practice’s legal and accounting policies.
The recurring-subscription and negative-option requirements described in 16 C.F.R. Part 425 should be applied only to the extent the rule is currently operative and applicable to the transaction. The FTC announced a final click-to-cancel rule on October 16, 2024, but its operative text, effective provisions, litigation status, and any subsequent agency action must be verified against the current eCFR and Federal Register before publication or migration as of October 1, 2026. Do not rely solely on the 2024 announcement.
Request a processing review to evaluate the proposed payment architecture, data flow, recurring model, and underwriting materials. MDLaunchr and WhiteLabelClinic.com support compliance-first infrastructure evaluation; approval remains the decision of the applicable provider.
What should I ask a healthcare payment processor?
Ask these questions in writing before submitting an application:
- 1“Does your current underwriting policy accept this exact telehealth and prescription-adjacent service model?”
- 2“Which website pages, disclosures, refund terms, clinical disclaimers, testimonials, or evidence do you require?”
- 3“What recurring-billing disclosures, consent records, cancellation process, and failed-payment controls do you require?”
- 4“Will you receive PHI, or can the proposed integration limit payment data to ordinary transaction information?”
- 5“If you are a business associate for this workflow, will you sign a BAA?”
- 6“Can stored payment credentials be migrated, and if not, what fresh authorization workflow is required?”
- 7“What are your current reserve, dispute, monitoring, settlement, and termination provisions for this account?”
- 8“Which card-network and processor rules apply, and where can I review the current terms?”
The last two answers must come from the applicable acquirer, processor, or underwriting provider. The approved federal sources for this article do not establish reserve formulas, card-network thresholds, fees, or recovery procedures.
What changed recently?
The FTC announced its final click-to-cancel rule on October 16, 2024. Amendments to the FTC Health Breach Notification Rule became effective July 29, 2024. The FTC finalized its Consumer Reviews and Testimonials Rule on August 14, 2024. Verify the current official text and effective provisions before relying on the recurring-subscription rule or migrating billing.
What state-law issues still need review?
State law can change the operational analysis even when the payment architecture is national. Review the state where the practice operates and the state where the patient is located for telehealth licensure, corporate-practice-of-medicine and ownership restrictions, fee-splitting and referral rules, automatic-renewal requirements, privacy and breach obligations, medical-record rules, prescribing relationships, pharmacy relationships, and advertising restrictions.
No state-specific conclusion is made here because no state was supplied and this research packet supports federal sources only. The business, its counsel, and independently licensed clinicians should separate platform functions from clinical decision-making and obtain the required state review.
Written and reviewed by MDLaunchr's clinical and compliance team. We build white-label telehealth infrastructure for founders, creators, and healthcare operators—covering providers, pharmacy, technology, and compliance.
This article is for general informational and educational purposes only and is not medical, legal, or regulatory advice. It does not create a provider-patient relationship and should not be used to diagnose or treat any condition. Telehealth and compounding regulations vary by state and change over time—consult qualified legal, clinical, and compliance professionals before launching or operating a telehealth program.
Frequently asked questions
Can I take payments for prescriptions through SimplePractice?
Possibly, but the applicable provider’s contract and underwriting controls decide whether the proposed activity is accepted. Confirm the exact model directly with that provider rather than assuming approval or restriction.
What is a healthcare merchant account with SimplePractice?
It is a separate payment relationship used alongside SimplePractice for card acceptance while the practice may retain existing scheduling, records, or intake workflows.
Does a separate merchant account guarantee approval?
No. The applicable provider reviews the business model, website, recurring billing, marketing, data flow, and other materials under its current criteria.
Can I transfer recurring customers to a new processor?
Sometimes, but token portability is not automatic. Confirm whether migration is supported; otherwise obtain fresh payment authorization before charging under the new arrangement.
Does a processor need a HIPAA business associate agreement?
Sometimes. The answer depends on whether the vendor handles PHI in a covered function or service, so map the data flow and evaluate the relationship under HIPAA.
Why did a telehealth payment account receive a review or limitation?
Possible reasons include underwriting, acceptable-use, fraud, or risk controls. The provider’s contract and written explanation control; federal sources do not establish one universal trigger.
- Federal Trade Commission — Federal Trade Commission Announces Final Click Cancel Rule Making It Easier Consumers End RecurringHealth Products Compliance GuidanceHealth ClaimsFederal Trade Commission Announces Final Rule Banning Fake Reviews TestimonialsHealth Breach Notification Rule
- U.S. Department of Health & Human Services — Breach Notification